semgrep-malware-demo-safe-wrapper 0.0.1

DEMO ONLY — innocent-looking package that pulls in semgrep-malware-demo-aws-cred-read transitively.

semgrep-malware-demo-safe-wrapper

⚠️ DEMO PACKAGE — DO NOT USE IN PRODUCTION ⚠️

A deliberately innocent-looking package whose own source code contains nothing suspicious — but which declares semgrep-malware-demo-aws-cred-read as a runtime dependency.

The point: scanning this package's source alone is clean. Resolving its dependency tree surfaces the demo "malware" transitively. Used to demonstrate why dependency-aware scanning matters.

This package does nothing useful. Do not install it for any real purpose.